Analysis
-
max time kernel
119s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
20-05-2024 12:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
file.exe
-
Size
2.9MB
-
MD5
c3736d21ee30c4dd5eec74b630e39b46
-
SHA1
5d12296adc4459a1b504f2439f41871b49370570
-
SHA256
5cf59df34e721c7e9b94227f0301d1e9c43146416f58b1f843414abf63e5c6e2
-
SHA512
4a5eb9559894759db8a1ec437e118bf59a62a3c179b6b49ce1a851f53e9f46b56730dfcf666637e0c94b609a70cf28dcaf4232d3036010c3c76ba90fa8eb382c
-
SSDEEP
49152:c9MJQ/SmPYLJg1jSsb7oAj25EJo/hX/I/:hOxPYlgUEovy
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
file.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Windows\CurrentVersion\Run\WinResiNet = "C:\\Users\\Admin\\AppData\\Local\\Temp\\file.exe" file.exe